CVE-2011-2168

Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.

Affected Software

Name	Vendor	Start Version	End Version
Openbsd	Openbsd	*	4.8 (including)
Openbsd	Openbsd	2.0 (including)	2.0 (including)
Openbsd	Openbsd	2.1 (including)	2.1 (including)
Openbsd	Openbsd	2.2 (including)	2.2 (including)
Openbsd	Openbsd	2.3 (including)	2.3 (including)
Openbsd	Openbsd	2.4 (including)	2.4 (including)
Openbsd	Openbsd	2.5 (including)	2.5 (including)
Openbsd	Openbsd	2.6 (including)	2.6 (including)
Openbsd	Openbsd	2.7 (including)	2.7 (including)
Openbsd	Openbsd	2.8 (including)	2.8 (including)
Openbsd	Openbsd	2.9 (including)	2.9 (including)
Openbsd	Openbsd	3.0 (including)	3.0 (including)
Openbsd	Openbsd	3.1 (including)	3.1 (including)
Openbsd	Openbsd	3.2 (including)	3.2 (including)
Openbsd	Openbsd	3.3 (including)	3.3 (including)
Openbsd	Openbsd	3.4 (including)	3.4 (including)
Openbsd	Openbsd	3.5 (including)	3.5 (including)
Openbsd	Openbsd	3.6 (including)	3.6 (including)
Openbsd	Openbsd	3.7 (including)	3.7 (including)
Openbsd	Openbsd	3.8 (including)	3.8 (including)
Openbsd	Openbsd	3.9 (including)	3.9 (including)
Openbsd	Openbsd	4.0 (including)	4.0 (including)
Openbsd	Openbsd	4.1 (including)	4.1 (including)
Openbsd	Openbsd	4.2 (including)	4.2 (including)
Openbsd	Openbsd	4.3 (including)	4.3 (including)
Openbsd	Openbsd	4.4 (including)	4.4 (including)
Openbsd	Openbsd	4.5 (including)	4.5 (including)
Openbsd	Openbsd	4.6 (including)	4.6 (including)
Openbsd	Openbsd	4.7 (including)	4.7 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-2168
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References